Skip to main content

Scopes

Scopes define what an API key or OAuth bearer token can do. Session callers skip scope checks because the dashboard uses route-level organization and product authorization instead. Use the smallest scope set that can complete the workflow.

Catalog

This catalog is copied from apps/client/src/lib/api/scopes.ts. Update both places whenever scopes are added, renamed, or removed.

Minimum scope examples

Denied requests

If a token-style caller lacks a required scope, TPC returns 403:
Create a new key or rotate the existing integration key from:
Do not add write scopes to a key used only for dashboards or reporting.